8111 matches found
iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ======================================================================= iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does...
drakeCMS.txt
-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: Windows\Linux\Unix -=+...
CVE-2006-5625
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...
CVE-2006-5548
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...
CVE-2006-5547
The CVE-2006-5547 entry concerns OTSCMS (Open Tibia Server Content Management System) versions 1.0.0 through 1.0.3. A PHP remote file inclusion flaw exists in OTSCMS.php via a crafted URL assigned to GLOBALS[config][otscms][directories][includes], enabling an attacker to execute arbitrary PHP cod...
Mambo/Joomla plugin.class.php脚本远程文件包含漏洞
Mambo（也被称为Joomla）是一款开放源代码的WEB内容管理系统。 Mambo在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 在Mambo的comcomprofiler文件夹的plugin.class.php脚本中： -----------------------plugin.class.php---------------------- ?php / Plugin handler @package Joomla @author various, JoomlaJoe and Beat / requireonce...
TextPattern 1.19 - 'publish.php' Remote File Inclusion
---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date Found : October, 25th 2006 Locatio...
Segue CMS <= 1.5.8 (themesdir) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Segue CMS = 1.5.8 themesdir Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...
CVE-2006-5381
Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to 1 dbmsql.inc, 2 dbmssql.inc, 3 dbmysqli.inc, 4 dboci8.inc, 5 dbodbc.inc, 6 dboracle.inc, 7 dbpgsql.in...
Debian DSA-1007-1 : drupal - several vulnerabilities
The Drupal Security Team discovered several vulnerabilities in Drupal, a fully-featured content management and discussion engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1225 Due to missing input sanitising a remote attacker could inject...
CVE-2006-5257
The CVE-2006-5257 entry concerns Ciamos CMS, version 0.9.6b and earlier, vulnerable to a PHP remote file inclusion via the module_cache_path parameter in modules/forum/include/config.php. This allows remote code execution if an attacker supplies a crafted URL. The NVD entry assigns a CVSS v2 base...
CVE-2006-5258
The CVE concerns the spell-checking component in Asbru products: Web Content Management <6.1.22, Web Content Editor <6.0.22, and Website Manager
CVE-2006-5242
SQL injection vulnerability in Etomite Content Management System CMS before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Update Protection against CBSMS Mambo Module Remote File Vulnerabilities
CBSMS Module for Mambo, an Open Source Content Management System, is prone to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary PHP code on an affected system...
WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== WebYep = 1.1.9 webyepsIncludePath File Include Vulnerabilities ================================================================== ECHOADV48$2006...
WebYep 1.1.9 - webyep_sIncludePath File Inclusion
WebYep 1.1.9 - webyepsIncludePath File Inclusion ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...
Exponent CMS index.php view Parameter Local File Inclusion
The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to properly sanitize user-supplied input to the 'view' parameter before using it in the 'modules/calendarmodule/class.php' script to...
Site@School Multiple Script cmsdir Parameter Remote File Inclusion
The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of Site@School installed on the remote host fails to sanitize input to the 'cmsdir' parameter before using it to include PHP code in several scripts. Provided PHP...
OPENi-CMS 1.0.1(config) Remote File Inclusion Vulnerability
Update: 22:44 09/11/06 Subject: "OPENi-CMS 1.0.1config Remote File Inclusion Vulnerability " Vulnerable version: OPENi-CMS 1.0.1 Operating System: - All OS Vendor URL: Support - [email protected] Website - http://www.openi-cms.org/ Description: Openi-CMS he one software PHP Content Management...
OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion
Update: 22:44 09/11/06 Subject: "OPENi-CMS 1.0.1config Remote File Inclusion Vulnerability " Vulnerable version: OPENi-CMS 1.0.1 Operating System: - All OS Vendor URL: Support - [email protected] Website - http://www.openi-cms.org/ Description: Openi-CMS he one software PHP Content Management...